Vaibhav Tripathi

fix(auth): clarify updateUserById applies changes directly

1

## Summary Users expected `updateUserById({ email, email_confirm: false })` to require user confirmation before applying the email change. The admin API intentionally applies changes directly. ## Problem The documentation for...

fix(realtime): wait for postgres_changes system ready before emitting SUBSCRIBED

1

## Summary Fixes a race condition where `SUBSCRIBED` status is emitted before PostgreSQL logical replication is ready, causing early database writes to miss `postgres_changes` events. ## Problem The Realtime subscription...

fix(auth): make _notifyAllSubscribers non-blocking to prevent callback deadlocks

2

## Summary Makes `_notifyAllSubscribers` non-blocking by removing `await` on subscriber callbacks. This prevents deadlocks when callbacks perform async operations that require the auth lock. ## Problem When a subscriber callback...

fix(auth): clear local storage on signOut when session is already missing

1

## Summary Fixes signOut throwing AuthSessionMissingError and leaving stale session data in local storage when the session was already invalidated from another device. ## Problem When a user signs out...

fix(auth): correct getAuthorizationDetails return type for already consented OAuth responses

2

## Summary Make `OAuthAuthorizationDetails` fields optional to support already-consented OAuth responses. ## Problem `getAuthorizationDetails` is typed to return `AuthOAuthAuthorizationDetailsResponse` with required fields (`authorization_id`, `client`, `user`, `scope`). However, when a user...

fix(auth): add dispose method to cleanup BroadcastChannel

1

## Summary Adds a `dispose()` method to `GoTrueClient` to properly clean up the `BroadcastChannel` event listener and close the channel. ## Problem In `GoTrueClient`, a `BroadcastChannel` is created with an...

fix(storage): expose status and statusCode on StorageError base class

2

## Summary Exposes `status` and `statusCode` properties on the base `StorageError` class for TypeScript compatibility. ## Problem Storage operations return errors typed as `StorageError`, but `status` and `statusCode` properties only...

fix(realtime): add generic overload for postgres_changes event type

2

Adds a generic overload for `on()` with `postgres_changes` that accepts any event type, enabling reusable subscription helpers with union types like `'*' | 'INSERT' | 'UPDATE' | 'DELETE'`. Fixes "No...

## Summary Adds an optional `jwt` parameter to `mfa.getAuthenticatorAssuranceLevel()`, enabling it to work in server side environments like Edge Functions where no session is stored. ## Problem In Edge Functions,...

feat(auth): add suppressedPaths option for non-supabase oauth flows

1

adds suppressedPaths option to skip implicit grant detection on specific paths. useful when using third party oauth (like facebook login) that returns tokens in the url, prevents supabase from intercepting...